Security Protection

Web: Example for Configuring DDoS Attack Defense

This section provides an example for configuring DDoS attack defense for intranet servers.

Web: Example for Configuring New Connection Rate Limit Per IP Address

Web: Example for Configuring SIP Over TLS NAT ALG

This section provides an example for configuring SIP over TLS ALG.

Web: Example for Configuring IDS Interworking with the NIP

This section provides an example for configuring the interworking with IDS.

Web: Example for Configuring the FW to Interwork with the HiSec Insight (Encrypted Traffic)

This example describes the typical networking and method for configuring the interworking with the HiSec Insight.

Web: Example for Configuring the FW to Interwork with the HiSec Insight (Non-encrypted Traffic)

This example describes the typical networking and method for configuring the interworking with the HiSec Insight.

Web: Example for Configuring the SACG in Standalone Off-line Mode

The off-line mode for networking is to directly connect the SACG to the core switch or router on the original network to realize the SACG interworking. In off-line mode, the SACG interworking can be deployed without affecting the original networking and requiring any cutovers.

Web: Example for Configuring the SACG Interworking in Standalone In-line Mode

In in-line mode, the SACG is directly connected to the original network in serial mode, or replace the original core switch or router, to realize the SACG Interworking. The in-line mode realizes the SACG Interworking, and provides other security functions at the same time.

CLI: Example for Configuring DDoS Attack Defense

This section provides an example for configuring DDoS attack defense.

CLI: Example for Configuring Dynamic Traffic Limiting for Traffic Attacks

This section provides an example for configuring dynamic traffic limiting for traffic attacks on the CLI.

CLI: Example for Configuring New Connection Rate Limit Per IP Address

CLI: Example for Configuring FTP/TFTP ASPF

In the applications of multi-channel protocols and NAT, ASPF acts as an important auxiliary means. This example describes how to configure ASPF, so that intranets can provide FTP and TFTP services normally. Meanwhile, intranet users are prevented from downloading harmful controls during the access to the extranet Web server.

CLI: Example for Configuring SIP Over TLS NAT ALG

This section provides an example for configuring SIP over TLS ALG.

CLI: Example for Configuring URPF

This provides an example for configuring the URPF.

CLI: Example for Configuring IDS Interworking with the NIP

This example describes the typical networking and method for configuring IDS interworking.

CLI: Example for Configuring the FW to Interwork with the HiSec Insight (Mirroring Traffic Through the FW)

CLI: Example for Configuring the FW to Interwork with the HiSec Insight (Mirroring Traffic Through the Switch)

CLI: Example for Configuring the SACG Interworking in Standalone Off-line Mode

In off-line mode, the SACG is directly connected to the core switch or router on the original network to implement the SACG Interworking, and the SACG Interworking can be deployed without affecting the original networking and requiring any network changes.

CLI: Example for Configuring the SACG Interworking in Standalone In-line Mode

In in-line mode, the SACG is directly connected to the original network in serial or replaces the original core switch or router to implement the SACG interworking function. The in-line mode implements the SACG interworking function and provides other security functions at the same time.

CLI: Example for Configuring the Interworking with the Agile Controller in Dual-device Off-line Mode